<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi,<div><br></div><div>I have the same problem as Marwen. With this log message.</div><div><div><b>Mon Apr 11 14:50:26 2011 [TM][I]: tm_context.sh: Executed "rm -rf /var/lib/one/2603e38607a144aef3bef07283d77095".</b></div><div><b>Mon Apr 11 14:50:26 2011 [LCM][I]: New VM state is BOOT</b></div><div><b>Mon Apr 11 14:50:26 2011 [VMM][I]: Generating deployment file: /var/lib/one/165/deployment.1</b></div><div><b>Mon Apr 11 14:50:28 2011 [LCM][I]: New VM state is RUNNING</b></div><div><b>Mon Apr 11 14:50:28 2011 [HKM][I]: Hook ebtables-start successfully executed. </b></div></div><div><b><br></b></div><div>However, if I do a list to ebtables, it is empty.</div><div><b><br></b></div><div><b><div>[oneadmin@geek root]$ sudo ebtables --list</div><div>Bridge table: filter</div><div><br></div><div>Bridge chain: INPUT, entries: 0, policy: ACCEPT</div><div><br></div><div>Bridge chain: FORWARD, entries: 0, policy: ACCEPT</div><div><br></div><div>Bridge chain: OUTPUT, entries: 0, policy: ACCEPT</div></b></div><div><b><br></b></div><div>When I run some ebtables command like this one, it works</div><div><b><br></b></div><div><div><b>sudo ebtables -A FORWARD -p IPv4 -j ACCEPT</b></div><div>this does add the rules to the table.</div><div><br></div><div>What can I provide to help you to debug this problem?</div><div><div><b><br></b></div></div><div><br></div><div>
<div><b>Leong Marco</b></div><div><a href="mailto:leong.chou.kin@usj.edu.mo">leong.chou.kin@usj.edu.mo</a></div><div><br></div><br class="Apple-interchange-newline">
</div>
<br><div><div>On Apr 7, 2011, at 9:46 PM, marwen marwen wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div class="gmail_quote"><br>Hi Zaina<div><br></div><div>Yes I added oneadmin in the sudoers file of the physical host where the VM is allocated.</div><div>And when I create the VM I specify the host where the VM will be allocated.</div>
<div>But the problem is not resolved.</div>
<div>Do you think that we must add this command in sudoers file of all cluster nodes. </div><div class="im"><div>oneadmin ALL=(ALL) NOPASSWD: /sbin/ebtables *</div>
<div><br></div></div><div>Best regards</div><div>Marwen<div><div></div><div class="h5"><br><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
From: Zaina AFOULKI <<a href="mailto:zaina.afoulki@ensi-bourges.fr" target="_blank">zaina.afoulki@ensi-bourges.fr</a>><br>
To: <a href="mailto:users@lists.opennebula.org" target="_blank">users@lists.opennebula.org</a><br>
Subject: Re: [one-users] Problem with ebtables OpenNebula<br>
Message-ID: <<a href="mailto:4D9CB10C.6080104@ensi-bourges.fr" target="_blank">4D9CB10C.6080104@ensi-bourges.fr</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
Hi Marwen,<br>
<br>
Did you make sure that oneadmin is added in the /etc/sudoers file with<br>
oneadmin ALL=(ALL) NOPASSWD: /sbin/ebtables * ?<br>
<br>
<a href="http://opennebula.org/documentation:archives:rel2.0:nm" target="_blank">http://opennebula.org/documentation:archives:rel2.0:nm</a><br>
<br>
--<br>
Zaina<br>
<br>
<br>
On 04/06/2011 06:40 PM, marwen marwen wrote:<br>
> Hi,<br>
><br>
> I'm using ebtables to isolate virtual network in OpenNebula.<br>
> I have a problem when OpenNebula execute ebtables-kvm script.<br>
> In fact, the log file mention no error "Wed Apr 6 18:22:02 2011 [HKM][D]:<br>
> Message received: EXECUTE SUCCESS 146 ebtables-start".<br>
> But there are no rule added to the list rules of ebtables in the physical<br>
> host where the VM is allocated.<br>
><br>
> ###############################################<br>
> sudo ebtables -L<br>
><br>
> Bridge table: filter<br>
><br>
> Bridge chain: INPUT, entries: 0, policy: ACCEPT<br>
><br>
> Bridge chain: FORWARD, entries: 0, policy: ACCEPT<br>
><br>
> Bridge chain: OUTPUT, entries: 0, policy: ACCEPT<br>
> ###############################################<br>
><br>
> And when I execute manually the script on the worker node, the rules are<br>
> added.<br>
> In the oned.conf we put this configuration<br>
><br>
> ###############################################<br>
> VM_HOOK = [<br>
> name = "ebtables-start",<br>
> on = "running",<br>
> command = "ebtables-kvm", # or ebtables-xen<br>
> arguments = "one-$VMID",<br>
> remote = "yes" ]<br>
><br>
> VM_HOOK = [<br>
> name = "ebtables-flush",<br>
> on = "done",<br>
> command = "ebtables-flush",<br>
> arguments = "",<br>
> remote = "yes" ]<br>
> ###############################################<br>
><br>
> can you help me to fix this problem<br>
><br>
> Best Regards<br>
> Marwen<br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
> <a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br>
<br></blockquote></div></div></div></div>
</div><br>
_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>http://lists.opennebula.org/listinfo.cgi/users-opennebula.org<br></blockquote></div><br></div></body></html>